Market entry

IoT certification requirements in California

Beyond federal rules, California adds chemical warning duties and consumer privacy rights that reach device identifiers and app data.

4 certification records apply · last reviewed 2026-10-14

What to prepare

  • Screen the bill of materials against the current chemical list
  • Assess likely exposure routes and duration of use
  • Choose between a warning and a documented no-exposure case
  • Apply the warning in the required format and refresh the review
  • Confirm whether the business thresholds apply
  • Update the privacy notice and collection disclosures
  • Implement request handling and identity verification
  • Review contracts with analytics and advertising partners

Frequently asked questions

Which certifications are mandatory to sell an IoT device in California?

Prop 65 (California Proposition 65), CCPA / CPRA (California consumer privacy rights), FCC (FCC equipment authorization), COPPA (Children’s online privacy (COPPA)). Each record lists the issuing body, what it covers and what it does not cover.

Are voluntary marks needed as well?

No voluntary schemes are catalogued for this market yet.

Where can I read the official requirement?

Every certification record links to the issuing body or the regulation text. Start from this page, open the record and follow its source links.

Does a certificate for a module cover the finished product?

No. A module certificate covers the module; the finished device usually needs its own approval or a documented module grant reference. Confirm with the issuing body or your test laboratory.